752fa766643c8b1b740fd36b8f47c777_JaffaCakes118 | Triage

Sharing

General

Target

752fa766643c8b1b740fd36b8f47c777_JaffaCakes118
Size

392KB
MD5

752fa766643c8b1b740fd36b8f47c777
SHA1

19c76930e23a5f95dc4e88f5a8b68c23945bd926
SHA256

9a7a41a057cac14e2937b8a0646e6b01b737686ded5300c4e5fe49fda3622683
SHA512

b2f9234efcb293f94ed6e3be56ec45dcc8364fc16042fcd68ae221662e63e9aa0597461ccf6f57e46e6fc5fb797d6ffcae6de3903e76aafc4064e066827eeb2b
SSDEEP

12288:rDaGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwmNdjw:rDaGGEdwORVb4iiX2tzGyG2o3NBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
752fa766643c8b1b740fd36b8f47c777_JaffaCakes118

Files

752fa766643c8b1b740fd36b8f47c777_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86475de566dd599edb4bfd68f27f6910

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GlobalUnlock
GetConsoleCP
FindAtomA
GetCalendarInfoA
LoadLibraryExA
Sleep
TlsGetValue
GetModuleHandleA
LocalLock
CreateFileA
CreateFileMappingA
GetConsoleAliasA
FreeEnvironmentStringsA
CloseHandle
LocalFree
WaitForSingleObjectEx
HeapCreate
GetLastError
GetACP

user32

GetDC
CallWindowProcA
DrawTextA
CreateDialogParamA
GetIconInfo
DefWindowProcA
CascadeWindows
SetFocus
DispatchMessageA
DrawEdge
IsWindow
GetMessageA
GetDlgItem
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncFlush
ASN1BERDecEoid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ